JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.

A research report on API banking, open banking, open finance, embedded finance, BaaS, regulation, security, and adoption trends shaping connected financial ecosystems.

Attackers exploited Langflow vulnerability CVE-2025-3248 to conduct an agentic AI-powered ransomware attack involving reconnaissance, credential theft, and lateral movement.

Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.

Sysdig threat hunters documented what they say is the first-ever documented agentic ransomware infection with an LLM - not a ...

MotherDuck is launching Flights, an agent-native data pipeline that enables users to choose the MCP server and AI agent of their choice to build and deploy data pipelines in minutes using a flexible, ...

HOSTAFRICA launches Africa's first hosting MCP server: Manage your VPS from Claude and ChatGPTYour AI assistant can now start servers, create backups and configure firewalls – no control panel ...

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...

Google is so famous for killing products that there’s a whole virtual graveyard you can explore. Google’s latest shutdown now ...

FilmLight’s fl-enhance repository collects scripts, shaders and FLAPI tools for Baselight, Daylight and Python-based post-production workflows.

Spring AI 2.0 advances the Java framework for generative AI apps with a Spring Boot 4 baseline, cleaner agentic tooling, Model Context Protocol support and vendor-backed integrations including Azure ...

Every Python developer knows some or all of these libraries, because they’re stable, reliable, and excellent at what they do.